IBM Tivoli Monitoring versions 6.3.0.7 through 6.3.0.7 Service Pack 21 contain a directory traversal vulnerability. A remote attacker can exploit this by sending a crafted URL with "dot dot" sequences (/../) to access, overwrite, or append arbitrary files on the affected system. This vulnerability has a high severity score of 8.6 and could lead to partial confidentiality and integrity loss, as well as high availability impact.